[AusNOG] VPNs over Telstra wireless broadband

[James Andrewartha]

On Thu, 14 Mar 2024, James Andrewartha wrote:

> We've recently rolled out a Fortigate IKEv2 IPSec VPN to our student 
> devices and it works well for most of them, but for some it works for a 
> short time (5 seconds to 5 minutes) and then gets stuck, leaving the 
> student with no internet access (since we force it to be always-on). Event 
> viewer shows rasclient 631 which is "The port was disconnected by the 
> user" and definitely not the case. The common thread seems to be they use 
> Telstra wireless broadband at home. Has anyone successfully run an IKEv2 
> VPN over this sort of connection?
> 
> It's not CGNAT since it works fine on my ABB NBN connection. Maybe it's 
> IPv6 464XLAT?

Should have searched Whingepool, apparently changing the PDP type to IPv4 
or IPv4v6 can work. I'll also look at bringing up our IPv6 allocation 
(shush).

https://forums.whirlpool.net.au/archive/98wxy5q3-4

-- 
# TRS-80              trs80(a)ucc.gu.uwa.edu.au #/ "Otherwise Bub here will do \
# UCC Wheel Member     http://trs80.ucc.asn.au/ #|  what squirrels do best     |
[ "There's nobody getting rich writing          ]|  -- Collect and hide your   |
[  software that I know of" -- Bill Gates, 1980 ]\  nuts." -- Acid Reflux #231 /